Cop fired after sharing Flock login with ICE husband: 983 searches

In August, the Savannah Police Department fired Amber Harpe after an internal investigation found she gave her husband, Tyler Harpe, access to the city's Flock license plate reader system. Tyler, an ICE agent, then ran 983 searches on 97 license plates, and the vast majority of those plates were registered to Hispanic drivers, according to local ABC affiliate WJCL. The department says it does not share its Flock data with ICE, and it concluded that sharing the login violated security protocols.

The Harpes say the access was not used for personal reasons, but that defense does little to quiet the questions the case raises. This is not a story about one bad login. It is a story about how quickly a surveillance tool built for one purpose, solving local crime, can become an unofficial immigration enforcement database. The only thing separating the two was a password that a spouse shared.

Flock Safety is a private surveillance company whose license plate reader cameras have become a common tool for police departments. The cameras capture plates and log when and where each vehicle appears, creating a searchable record that can be used to track suspects, link crimes, and locate vehicles of interest. In many jurisdictions, that data is stored for months or longer, and access is typically limited to sworn officers and trained staff. The Savannah case shows what happens when the boundary between a police database and a federal immigration agency is enforced by policy rather than by technology.

For city leaders, the incident exposes a critical governance gap. SPD's decision not to share Flock data with ICE is a policy choice. But a single shared credential circumvented that policy, creating a quiet backdoor that the department did not detect until an investigation was opened. The practical lesson is that access control cannot rely on trust alone. Departments that deploy these systems need to monitor who logs in, how often, and what they search, and they need automated red flags when a user's pattern changes. In this case, 983 searches across 97 plates is not a subtle anomaly; it is a flashing indicator that someone outside the intended user base was using the system.

The legal stakes are also significant. If Tyler Harpe's searches contributed to any immigration enforcement actions, defense attorneys could challenge the evidence as fruit of unauthorized access. Civil liberties groups have long argued that license plate readers create a mass surveillance system that disproportionately impacts communities of color. A case where an ICE agent used a police login to run hundreds of searches on plates tied to Hispanic drivers hands that argument concrete evidence. It also creates potential liability for the city: when a department fails to safeguard sensitive data, it can face lawsuits over privacy violations, especially if the data is used by an agency with a different enforcement mission.

There is also a second-order effect for the broader market in police surveillance technology. Vendors like Flock have built their pitch around being a force multiplier for cash-strapped departments, offering relatively inexpensive cameras with cloud-based data storage and analytics. But every high-profile access failure raises the political cost of buying these systems. City councils and privacy boards are already asking harder questions about data retention, access logging, and third-party sharing. Incidents like this one accelerate that scrutiny. For the industry, the threat is not just regulation; it is reputational damage that makes cautious municipalities hesitate before signing contracts.

For executives in adjacent industries, whether they sell data tools to government or rely on law enforcement data, the lesson is to treat credentials as a security boundary, not a convenience. The Harpe case is a reminder that insider risk is not always an employee with bad intentions. Sometimes it is an employee who does a favor for a spouse. The fix is not more background checks. It is technical enforcement: role-based access, break-glass procedures, and audit trails that make every search attributable. The system should have flagged that a user named Harpe was running searches on 97 different plates, and it should have locked down the account long before the August firing.

The Savannah case is local, but the pattern is national. Immigration enforcement access to local police data is one of the most contested questions in American public safety, and this incident shows how easily a policy boundary can be crossed. For every city using license plate readers, the question is not whether their officers would share a login. It is whether the system would notice if they did.